Detection method, device and computer storage medium for abnormal data collection

Abstract

The present application provides a detection method, device and computer storage medium for abnormal data collection, to obtain a characteristic data sequence within a first preset time of a network device; each characteristic data of the characteristic data sequence corresponds to a time stamp; the characteristic data sequence Generated according to the data transmission record of the network device within the first preset time; detect the characteristic data sequence based on the abnormal point detection algorithm to obtain abnormal data in the characteristic data sequence; determine the second preset of the network device according to the time stamp of the abnormal data Abnormal data within the time; wherein, the second preset time is less than the first preset time; according to the abnormal data within the second preset time, abnormal data collection and detection are performed. This solution uses the abnormal point detection algorithm to analyze the data volume recently transmitted by the network equipment, so as to formulate dynamic detection standards, so that the abnormal data collection of the network equipment can be detected more accurately, so as to avoid false positives or false negatives.

Description

technical field [0001] The present invention relates to the technical field of network security, and in particular, to a detection method, device and computer storage medium for collecting abnormal data. Background technique [0002] At present, all areas of social life are closely integrated with the Internet. Accordingly, it is particularly important to ensure the information security of network devices connected to the Internet and prevent data leakage of network devices. [0003] Abnormal data collection often occurs before data leakage occurs on network equipment. The abnormal data collection here refers to the large amount of data transmitted (sent or downloaded) by network equipment in a short period of time. Therefore, data leakage can be prevented by detecting whether abnormal data aggregation occurs on network devices. [0004] The existing detection method is to detect the amount of data transmitted by the network device in a recent period of time, and if the amo...

AI Technical Summary

Problems solved by technology

[0005] However, under normal circumstances, the amount of data that needs to be transmitted by different network devices at different times varies greatly. The existing method based on a fixed threshold to detect whether abnormal data collection occurs in each network device at any time is obviously not accurate. Reflecting this change, it is prone to false positives, false positives, etc.

Images